Changes

473 bytes added ,  16:04, 29 May 2014
no edit summary
Line 535: Line 535:  
| Available(normally not accessible due to SVC-access-control).
 
| Available(normally not accessible due to SVC-access-control).
 
| No
 
| No
| Backdoor(unsigned int CodeAddress) This calls the specified code in SVC-mode. This is used/accessible by [[FIRM|Process9]].
+
| Backdoor(unsigned int CodeAddress) This is used/accessible by [[FIRM|Process9]].
 
|-
 
|-
 
| 0x7C
 
| 0x7C
Line 882: Line 882:  
  u32 hmm?[2];
 
  u32 hmm?[2];
 
  }
 
  }
 +
 +
= SVC7B Backdoor =
 +
This saves SVC-mode SP+LR on the user-mode stack, then sets the SVC-mode SP to the user-mode SP. This then calls the specified code in SVC-mode. Once the called code returns, this pops the saved SP+LR off the stack for restoring the SVC-mode SP, then returns from the svc7b handler. Note that this svc7b handler does not disable IRQs, if any IRQs/context-switches occur while the SVC-mode SP is set to the user-mode one here, the ARM11-kernel will crash(which hangs the whole ARM11-side system).
    
= Kernel error-codes =
 
= Kernel error-codes =